Ah, another open question. :)  My feeling is that they could easily get out of sync anyway.  For instance, we'd probably always rev the npm package with a new release of the SDK, but we may rev the package itself for package-specific updates, which would then stop tracking the SDK release version.  Good question.